Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
File: 9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json)
Hash identifier: pzokTXPdQ9yM3KWDQHdVDToWDKk3OPIUFtB78n4xDIU=
Subject key identifier: E2:31:B4:99:94:E4:70:BF:88:0B:1C:BE:7F:D4:03:FE:CF:BC:05:0A
Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Certificate serial: 019EC0A47907D0D20C1CCA74C35E64852F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 11:01:04 +0000
Manifest this update: Sat 13 Jun 2026 11:01:04 +0000
Manifest next update: Sun 14 Jun 2026 11:01:04 +0000
Files and hashes: 1: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: lM96nh0i7zYUF5GzlikDQ3sCZNrLuEnl+SsxCoU1moU=)
2: kseNmYdhBq1K_noazDOmBmDbF5s.roa (hash: ATubQciMVM4Jml+pZxIMMSnD/6uFD6UKEHkdr+OIXB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:79:07:d0:d2:0c:1c:ca:74:c3:5e:64:85:2f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64
Validity
Not Before: Jun 13 11:01:04 2026 GMT
Not After : Jun 14 11:01:04 2026 GMT
Subject: CN=e231b49994e470bf880b1cbe7fd403fecfbc050a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:d8:56:ec:7f:1b:b0:b5:16:c6:28:b8:1a:
4e:e5:83:ff:e7:ea:21:e2:58:52:26:1e:97:dd:b5:
2b:6d:57:e4:98:30:cd:b2:b8:01:99:ed:11:61:7c:
f8:18:27:02:22:75:b9:58:36:b3:37:7d:9f:46:e0:
da:48:a7:00:aa:5c:95:fc:4e:7c:3e:81:ee:4b:4c:
70:cf:73:52:54:ed:1d:11:03:49:46:61:96:75:4a:
9c:19:b4:b1:4b:63:6b:d2:9f:c3:b3:15:61:36:34:
5b:95:8c:b2:ef:a7:1e:5e:7c:51:bf:17:93:cd:1e:
13:70:8e:9b:2f:38:6a:40:91:ba:f4:22:6a:4f:21:
a8:18:70:8a:85:02:9e:d2:ff:23:c9:fd:bf:21:9a:
46:bd:3f:61:fd:8f:66:c6:b3:9d:b1:58:c0:85:8c:
35:7d:2f:81:ee:c3:20:bf:d1:ae:3b:52:8c:e0:8f:
0f:db:f8:5f:74:cf:65:26:be:70:76:49:73:c1:79:
46:3f:ac:83:b5:d1:3d:f6:30:09:83:fc:7c:1c:d7:
a7:6b:61:64:b5:80:1f:08:fb:18:57:3f:66:7e:c8:
ac:d5:07:65:ff:91:77:e5:b2:86:8b:6b:8b:ee:33:
9c:82:75:a0:85:a0:d6:07:4c:4b:3c:fa:95:ec:18:
39:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:31:B4:99:94:E4:70:BF:88:0B:1C:BE:7F:D4:03:FE:CF:BC:05:0A
X509v3 Authority Key Identifier:
keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:09:74:69:de:4e:d0:fb:c0:ba:08:1b:87:65:f9:04:06:1e:
f7:21:75:66:e4:51:40:92:c9:07:22:0c:8f:e9:ef:62:e2:7e:
53:51:a5:96:1f:4a:6a:ec:0b:c7:e2:21:0a:7d:75:7b:4c:a7:
d1:7d:46:ca:54:7e:ed:5d:22:96:22:d8:c6:2f:00:20:67:ff:
44:ce:4e:c0:80:87:a6:73:5e:34:9a:5d:c3:f6:b3:1d:f6:11:
f1:08:18:18:2b:c3:1b:a1:61:d6:5b:1b:1a:9c:be:7a:c1:28:
04:46:ac:e3:b5:11:56:23:0e:de:9e:94:c7:98:fd:8e:df:5f:
97:2c:4f:bf:96:1b:75:6e:e6:84:6a:7d:b9:d0:e5:5b:d3:5e:
05:a2:3d:f1:e0:08:e7:48:15:56:a3:06:0d:37:a0:f8:b3:e0:
95:47:84:72:42:51:12:38:a2:1b:c5:ac:80:e1:bd:69:be:30:
7b:5f:54:92:cd:9b:4e:30:de:53:1a:e9:6e:7f:fb:1d:ca:06:
0f:55:27:46:a9:4c:e8:df:9d:7c:20:73:2c:bd:12:86:be:9e:
94:30:1e:19:c6:b5:18:6f:18:49:42:b1:02:19:f2:25:3c:b6:
90:2f:6a:a3:fb:ef:c9:05:b7:ab:76:2d:88:40:b4:36:4a:a4:
f6:fd:e2:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ApHkH0NIMHMp0w15khS8tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YjlkZDllMzRmZTY2ZDc1MTM4OTAzNzA4ZjhjZTFmYmQz
NDJkNjQwHhcNMjYwNjEzMTEwMTA0WhcNMjYwNjE0MTEwMTA0WjAzMTEwLwYDVQQD
EyhlMjMxYjQ5OTk0ZTQ3MGJmODgwYjFjYmU3ZmQ0MDNmZWNmYmMwNTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSHYVux/G7C1FsYouBpO5YP/5+oh
4lhSJh6X3bUrbVfkmDDNsrgBme0RYXz4GCcCInW5WDazN32fRuDaSKcAqlyV/E58
PoHuS0xwz3NSVO0dEQNJRmGWdUqcGbSxS2Nr0p/DsxVhNjRblYyy76ceXnxRvxeT
zR4TcI6bLzhqQJG69CJqTyGoGHCKhQKe0v8jyf2/IZpGvT9h/Y9mxrOdsVjAhYw1
fS+B7sMgv9GuO1KM4I8P2/hfdM9lJr5wdklzwXlGP6yDtdE99jAJg/x8HNena2Fk
tYAfCPsYVz9mfsis1Qdl/5F35bKGi2uL7jOcgnWghaDWB0xLPPqV7Bg5YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIxtJmU5HC/iAscvn/UA/7PvAUKMB8GA1UdIwQY
MBaAFPS53Z40/mbXUTiQNwj4zh+9NC1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lY2FmNDQtMDhjYy00MWJiLTgxZDMt
MjYyYmVjNzE3YjE3LzEvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9lY2FmNDQtMDhjYy00MWJiLTgxZDMtMjYyYmVjNzE3YjE3
LzEvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAl0ad5O
0PvAuggbh2X5BAYe9yF1ZuRRQJLJByIMj+nvYuJ+U1Gllh9KauwLx+IhCn11e0yn
0X1GylR+7V0iliLYxi8AIGf/RM5OwICHpnNeNJpdw/azHfYR8QgYGCvDG6Fh1lsb
Gpy+esEoBEas47URViMO3p6Ux5j9jt9flyxPv5YbdW7mhGp9udDlW9NeBaI98eAI
50gVVqMGDTeg+LPglUeEckJREjiiG8WsgOG9ab4we19Uks2bTjDeUxrpbn/7HcoG
D1UnRqlM6N+dfCBzLL0Shr6elDAeGca1GG8YSUKxAhnyJTy2kC9qo/vvyQW3q3Yt
iEC0Nkqk9v3ikg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:32:11 2026 by rpki-client